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Amendments to the Claims: 

The following listing of claims replaces all prior versions, and listings, of claims 
in the present application. Please amend claims 1 and 6 as follows: 

Listing of the Claims: 

1 . (currently amended) A method for use in a computer system that effects secure access 
to a store,, comprising: 

receiving a request to access a store from a first process initiated by a requester en 
a r e mot e s e rv e r ; 

providing said store with an e xclusiv e us e r id; 

initiating a second process responsive to said store access request, wherein data 
generated by said second process b e ing is accessible by to said first process but inaccessible to 
the requester; 

changing a context of said second process to the user id of said store; 
providing said store with an exclusive user id ; 

said second process receiving tokenized credentials from said first process 
responsive to said request; 

said second process performing a lookup of said tokenized credentials; 

said second process passing a user id and password associated with said store to 
said first process if said tokenized credentials are recognized; 
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communicating between said second first process and said store via private 
communications channels , said communications channels being inaccessible to the requester ; 
and 

said first process obtaining data from said store via said private communications 
channels responsive to said store access request using said user id and password associated with 
said store . 

2. (original) A method in accordance with claim 1 further comprising: sending the data 
responsive to said store access request to a downstream process. 

3. (original) A method in accordance with claim 1 further comprising: logging said store 
access request. 

4. (original) A method in accordance with claim 3 wherein sending the data responsive 
to said store access request to a downstream process further comprises never sending the data to 
the requestor. 

5. (original) A method in accordance with claim 1 wherein said computer system 
employs the UNIX operating system and wherein said context changing comprises invoking the 
UNIX set user id facility. 
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6. (currently amended) A computer system comprising: 

a data store having an exclusive user id in the computer system; 

a system for providing secure access to said data store, said system being 
configured to receive a request for access to said data store from a first process initiated by a 
requester on a r e mot e s e rv e r , said exclusive user id being inaccessible to said requester, and 
configured to initiate a second process responsive to said request for access to said data store, 
wherein data generated by said second process b e ing is accessible by to said first process but 
inaccessible to the requester, said second process being responsive to said request for access to 
said data store by changing its user id to the exclusive user id, said second process being 
operable to receive tokenized credentials from said first process responsive to said request, said 
second process being operable to perform a lookup of said tokenized credentials, said second 
process being operable to pass a user id and password associated with said data store to said first 
process if said tokenized credentials are recognized, said first proc e ss obtaining data r e sponsiv e 
to said requ e st for acc e ss to said data stor e; and 

private communications channels between said sy s t e m first process and said data 
store for communicating and responding to requests for data by said first process using said user 
id and password associated with said data store, said communications channels being 
inaccessible to the requester . 

7. (original) A computer system according to claim 6 wherein the system for providing 
secure access is further configured to provide data from said data store to a downstream process. 
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8. (original) A computer system according to claim 6 wherein the system for providing 
secure access is further configured to log requests for access to said data store. 

9. (new) A method for use in a computer system that operates under the UNIX operating 
system that effects secure access to a store, comprising: 

executing a shell script which creates a data stream containing a tokenized user id 
and password in order to initiate a request to access a store from a first process initiated by a 
requester; 

said first process initiating a second process responsive to said store access 
request, said second process and said store being in a protected area, wherein data generated by 
said second process is accessible to said first process but inaccessible to the requester; 

said second process obtaining the tokenized user id and password of the requestor 
from said first process along said data stream; 

changing a context of said second process to the effective user id of said store 
using the UNIX set user id facility; 

said second process providing said store with said effective user id, said effective 
user id being different from said user id of the requestor; 

said second process receiving said tokenized user id and password from said first 
process responsive to said request; 
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said second process converting the tokens to said user id and password of the 
requestor and performing a lookup of said user id and password of the requestor in a credential 
store; 

said second process passing a user id and password associated with said store to 
said first process along a second data stream if said user id and password of the requestor are 
found in said credential store; 

communicating between said first process and said store via a sending inter- 
process pipe and a receiving inter-process pipe, said first and second inter-process pipes being 
inaccessible to the requester; and 

said first process obtaining data from said store via said second inter-process pipe 
responsive to said store access request via said first inter-process pipe using said user id and 
password associated with said store. 

10. (new) A method in accordance with claim 9 further comprising: sending the data 
responsive to said store access request to a downstream process. 

1 1 . (new) A method in accordance with claim 9 further comprising: logging said store 
access request. 

12. (new) A method in accordance with claim 1 1 wherein sending the data responsive to 
said store access request to a downstream process further comprises never sending the data to the 
requestor. 
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